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Field of the Disclosure 
[0001) The present disclosure relates to methods and systems for instant messaging (IM). 

Description of the Related Art 

[0002] Current instant messaging (IM) systems offer limited mechanisms for parental 
control of a child's IM usage. Some specialized IM devices are tied to a wireless base 
station that controls access to the Internet. The wireless base station plugs into a host 
personal computer (PC) that must be powered for the IM devices to access the Internet. 
Parents deploy the wireless base station and the host PC to enable IM usage at home for 
their children. The parents set up IM preferences using the host PC, which in turn 
dictates when the IM devices can access the Internet, with whom users of the IM devices 
can chat, and which chat rooms can be accessed using the IM devices, 

[0003] Using specialized IM devices as described above has its shortcomings. Each user 
is restricted to using a particular IM device for IM applications. Further, security holes 
result from tying the administration of control policies to the wireless base station. If an 
end user takes his/her IM device to another location having another base station and 
another host PC, usage of the IM device is dictated by a different set of IM preferences 
which may be less restrictive than the preferences stated in the host PC at home. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0004] The present invention is pointed out with particularity in the appended claims. 
However, other features are described in the following detailed description in conjunction 
with the accompanying drawing in which: 

[0005] FIG. 1 is a flow chart of an embodiment of a method of controlling IM usage; 

[0006] FIG. 2 is a schematic, block diagram of an embodiment of a system to control IM 
usage; and 

[0007] FIG. 3 is a block diagram of a basic data model for the IM subscriber profile 
database. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

[0008] Embodiments of the present invention are described with reference to FIG. 1, 
which is a flow chart of an embodiment of a method of controlling IM usage, and FIG. 2, 
which is a schematic, block diagram of an embodiment of a system to control IM usage. 

[0009] As indicated by block 10, the method comprises receiving a request from a user 
12 to sign up for an IM service on behalf of a minor 14. Typically, the user 12 is a parent 
or guardian of a child (e.g. a son or a daughter) who is the minor 14. The user 12 makes 
the request using a client device 16. Examples of the client device 16 include, but are not 
limited to, a personal computer (PC), a personal digital assistant (PDA), and a wireless 
telephone. The request is received by an IM registration server 20 via a computer 
network such as the Internet 22. 

[0010] As indicated by block 24, the method comprises receiving one or more 
authentication credentials to establish the age of the user 12. In one embodiment, the age 
of the user 12 is received via the Internet 22 from a third-party identity service 26 that 
can vouchsafe therefor. An example of the third-party identity service 26 to which the 
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user 12 has subscribed is provided by Liberty Alliance™. Other ways of establishing the 
age of the user 12 are based on a driver's license number for the user 12, and whether or 
not the user 12 has possession of a valid credit card, for example. 

[0011] As indicated by block 30, the method comprises proceeding with the sign up 
process if the age of the user 12 is at or above a particular threshold T. The threshold T 
may be 1 8 years old or 21 years old, for example. If the age of the user 1 2 cannot be 
established, or if the user 12 is not old enough to proceed, a termination message 
indicating same is provided to the user 12, as indicated by block 32. 

(0012] As indicated by block 34, the method comprises providing a Web-based profile 
administrator interface to the user 12. To provide the profile administrator interface, the 
IM service registration server 20 outputs a computer data signal, such as a signal in a 
markup language, using a communication protocol. Examples of the markup language 
include, but are not limited to, hypertext markup language (HTML) and wireless markup 
language (WML). Examples of the protocol include, but are not limited to, hypertext 
transfer protocol (HTTP) and wireless access protocol (WAP). The computer data signal 
is communicated to the client device 16 via the Internet 22. 

[0013] The client device 16 displays the profile administrator interface based on the 
computer data signal. Using the profile administrator interface with the client device 16, 
the user 12 creates a profile for the minor 14. The profile corresponds to an IM handle 
for the minor 14. The profile can include any combination of the following control 
policies: (a) times of day, such as hours, when the minor 14 can access the Internet 22 for 
instant messaging or chat; (b) black lists of other users of the IM service that cannot be 
reached by the minor 14; (c) white lists of other users of the IM service with which the 
minor 14 can exclusively communicate; (d) preferred lists of chat rooms that the minor 
14 is able to join or not able to join; and (e) parental control-based ratings of chat rooms 
that the minor 14 can join (e.g. only PG-13 or under chat rooms). The profile can include 
time-based controls such as: (a) specific times when the minor 14 can or cannot use 
his/her client device 36; (b) specific times when the minor 14 can log on or cannot log on 
(e.g. he/she cannot log on during exams in school); (c) specific times when messages 
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from buddies are to be blocked; and (d) specific times when messages from anyone not in 
the buddy list will be blocked or allowed. In general, any of the aforementioned policies 
can applied to the minor 14 and/or his/her particular client device 36. 

(0014] As indicated by block 38, the method comprises receiving the profile for the 
minor 14 as created by the user 12. The profile is received by the IM service registration 
server 20 from the client device 16 via the Internet 22. The IM service registration server 
20 stores the profile in an IM subscriber profile database 40. The IM subscriber profile 
database 40 stores profiles for a plurality of IM subscribers. The IM subscriber profile 
database 40 is depicted to illustrate various time-based control policies included in the 
various profiles for different IM subscribers. Each of the subscribers may use any 
combination of one or more of the time-based control policies. 

[0015] After the profile is created and stored, the IM service is enabled for the minor 14. 
As indicated by block 42, the method comprises receiving a request from the minor 14 to 
log on to the IM service. The minor 14 makes the request using either the client device 
36 or another client device. Examples of the client devices include, but are not limited to, 
a PC 44, a PDA 46, a wireless telephone 50 that supports downloadable applications, and 
a specialized IM device 52. The PC 44 may access the Internet 22 by a digital subscriber 
line (DSL) 54 or another connection. The PDA 46 may access the Internet 22 by a 
wireless access point (WAP) 56, such as an 802.1 1 -based or WI-FI WAP. The wireless 
telephone 50 may access the Internet 22 by a wireless telephone network 60, such as a 
cellular telephone network, via General Packet Radio Service (GPRS) or another third 
generation (3G) medium, or a Short Message Service (SMS). The profile of the minor 14 
may be tied to the wireless telephone 50 by a license/user identification combination. 
The specialized IM device 52 may access the Internet 22 by a base station 62, as 
described herein, using a standard protocol such as 802. 1 1 . Regardless of the specific 
type of client device used by the minor 14, the request is received by an IM server 64 via 
the Internet 22. 

[0016] As indicated by block 70, the method comprises providing, limiting or inhibiting 
the IM service to the minor 14 in accordance with the user-created profile. These acts 
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may comprise any combination of: inhibiting communication between the minor 14 and 
those users on the black lists; enabling communication exclusively with those users on 
the white lists; enabling the minor 14 to join chat rooms on the preferred list; inhibiting 
the minor 14 to join chat rooms not on the preferred list; enabling the minor 14 to join 
chat rooms based on their ratings; and inhibiting the minor 14 to join chat rooms based on 
their ratings. These acts may further comprise any combination of: enabling use of the 
client device 36 during specific allowed times indicated in the profile; inhibiting use of 
the client device 36 outside of the specific allowed times or during specific black-out 
times indicated in the profile; enabling the minor 14 to log on during specific allowed 
times; inhibiting the minor 14 to log on outside of the allowed times or during specific 
black-out times; blocking messages from buddies during specific black-out times or 
outside of specific allowed times; and blocking messages from anyone not in the buddy 
list during specific black-out times or outside of specific allowed times. The times are 
localized to a subscriber's time zone. Each of the time intervals can be specified as either 
recurring or a one-time occurrence. 

[0017] Preferably, the IM server 64 communicates profile information to the client 
device 36. Based on the profile information, the client device 36 modifies its 
functionality to comply with the policies. Regardless of the specific type of client device 
36, plug-in software components can be used to add the parental control functionality to 
standard IM clients. Examples of IM clients include, but are not limited to, YAHOO!™ 
Messenger, AIM™, MSN™ messenger, GAIM™ and JABBER™. 

[0018] In this way, the policies stored by the IM subscriber profile database 40 are 
downloaded to the client device 36. A policy engine 71, such as the aforementioned 
plug-in, running on the client device 36 performs the actual task of verifying all access to 
ensure compliance with the policies. The policy engine 71 filters incoming and outgoing 
messages to other IM users or groups based on the policies. The policy engine 71 also 
may act to send alerts, in the form of e-mails or instant messages, to the parent or 
guardian user 12 to alert him/her of the activity of the client device 36. In general, the 
policy engine 71 acts to provide, limit and/or inhibit use of the IM service on the client 
device 36. 
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|0019) For client devices that cannot be extended, such as an SMS-based telephone, the 
policy engine may reside at a proxy server rather than at the client devices themselves. 

[0020J The policy engine 71 may periodically update usage data stored by either the IM 
server 64 or the IM subscriber profile database 40. In this case, the IM server 64 
periodically receives usage data from the client device 36. The usage data may comprise 
a log of actions taken to ensure compliance with the policies. 

[0021] Alternatively, the IM server 64 can act to provide, limit and/or inhibit the IM 
service based on the profile stored in the IM subscriber profile database 40. In this 
alternative, the IM server 64 monitors the minor's 14 usage of the IM service, and stores 
associated information that can be subsequently viewed by the user 12. However, use of 
the policy engine 71 makes the whole system more scaleable to a large number of users 
than a completely centralized model where servers filter through each incoming/outgoing 
message to any policy-controlled client device. 

[0022] Either way, the policy engine 71 of the client device 36 and/or the IM server 64 
ensure that the IM service is provided to the minor 14 in compliance with the policies 
established by the user 12. 

[0023] As indicated by block 72, the method comprises receiving a request from the user 
12 to view the usage information associated with the minor 14. The request is received 
by the IM service registration server 20 from the client device 16 via the Internet 22. 

[0024] As indicated by block 74, the method comprises receiving one or more 
authentication credentials to establish the age of the user 12. This act is similar to the act 
performed in block 24. The age of the user 12 can be established via the Internet 22 
using the third-party identity service 26 that can vouchsafe therefor. Other ways of 
establishing the age of the user 12 are based on a driver's license number for the user 12, 
and whether or not the user 12 has possession of a valid credit card, for example. 

[0025] As indicated by block 76, the method comprises proceeding with the usage 
information process if the age of the user 12 is at or above a particular threshold T. The 
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threshold T may be 18 years old or 21 years old, for example. If the age of the user 12 
cannot be established, or if the user 12 is not old enough to proceed, a termination 
message indicating same is provided to the user 12, as indicated by block 78. 

[0026] It is noted that identity-based authorization may be substituted for age-based 
authorization to determine whether the user 12 can proceed to the profile administrator 
interface. In this case, based on the identity-based authorization, the system may assert 
that the user 12 is indeed the parent or guardian of the minor 14, As a result, other adults 
who are not the parent or guardian of the minor 14 would not be able to authorize use of 
the client device 36 and/or IM client software by the minor 14. 

[0027] As indicated by block 80, the method comprises providing the profile 
administrator interface to the client device 16 of the user. The profile administrator 
interface displays the various profile information and usage information for the minor 14. 
Examples of the information include, but are not limited to, buddy lists and chat room 
history. 

[0028] The system and method proposed herein allow the minor 14 to use an IM client 
(which is hardware-based and/or software-based) over many types of networks having 
connectivity to the Internet 22. The minor's 14 usage is governed by a set of rules 
specified in a profile associated with the minor 14 and his/her client device 36. The 
profile is stored in the IM network. The minor 14 is allowed to use the IM service in 
multiple locations in accordance with the rules specified by the user 12. 

[0029] For example, consider the user 12 being a parent who sets up a profile for his 
daughter, the minor 14, to enable her to access an Internet-based service. Whenever the 
daughter logs into the service after connecting to the Internet, the IM client would receive 
the profile and modify its functionality to comply with the profile rules. Thus, the 
daughter would be able to use an IM device in her home using a WI-FI network, and at a 
public library that provides WI-FI connectivity, both with the same set of preferences and 
policies set by the parent. 
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[0030] FIG. 3 is a block diagram of a basic data model for the IM subscriber profile 
database 40. The data comprise subscriber time usage data 1 00, subscriber data 1 02, 
subscriber list data 104, subscriber list detail data 106, subscriber for device data 1 10, 
device data 112, chat room list data 1 14, rating data 1 16, chat room data 120, list time 
usage data 122, policy data 124, action list data 126, action log data 130 and device time 
usage data 132. 

[00311 The subscriber data 102 has a subscriber identifier as a primary key, a subscriber 
license number, a name, a screen name, a rating identifier as a first foreign key, an 
identifier of the guardian of the subscriber as a second foreign key, and an indication of 
whether the subscriber is an administrator. In an example data set wherein the subscriber 
identifier identifies the minor 14, the subscriber is indicated not to be an administrator. 
In an example data set wherein the subscriber identifier identifies the user 12, the 
subscriber is indicated to be an administrator. 

[0032] The subscriber time usage data 100 comprises the subscriber identifier as a 
primary key and a foreign key, a time period identifier as a primary key, a start time and 
an end time to define the time period, and an indication if use is allowed or disallowed in 
the time period. 

[0033] The subscriber list data 104 comprises a list identifier as a primary key, the 
subscriber identifier as a foreign key, and an indication if the list is a white list. 

[0034] The subscriber list detail data 1 06 comprises the list identifier as a primary key 
and a foreign key, and member data as a foreign key. The member data identifies 
members of the list identified by the list identifier. 

[0035] The list time usage data 122 comprises the list identifier as a primary key and a 
foreign key, a time period identifier as a primary key, a start time and an end time to 
define the time period, and an indication if use is allowed or disallowed in the time 
period. 
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[0036} The subscriber for device data 1 10 comprises the subscriber identifier as a 
primary key and a foreign key, and a device identifier as a primary key and a foreign key. 
In an example data set wherein the subscriber identifier identifies the minor, the device 
identifier may identify the client device 36. 

[0037) The device data 1 12 comprises the device identifier as a primary key and a model 
number. For example, the model number may comprise a model number of the client 
device 36. 

[0038] The device time usage data 1 32 comprises a time period identifier as a primary 
key, the device identifier as a primary key and a foreign key, a start time and an end time 
to define the time period, and an indication if use is allowed or disallowed in the time 
period. 

[0039] The chat room list data 1 14 comprises a personalized list identifier as a primary 
key, the subscriber identifier as a primary key and a foreign key, a chat room identifier as 
a foreign key, and an indication if the chat room list is a white list. 

[0040] The rating data 1 16 comprises the rating identifier as a primary key, a description 
and a rating display, 

[0041] The chat room data 120 comprises the chat room identifier as a primary key, a 
description, and the rating identifier as a foreign key. 

[0042] The policy data 124 comprises the subscriber identifier as a primary key and a 
foreign key, a policy identifier as a primary key, an action type as a foreign key, and a 
custom policy property. The policy data 124 defines the policies that are to be enforced, 
such as by the policy engine 71 of the client device 36. 

[0043] The action list data 126 comprises the action type as a primary key and an action 
description. The action list data 126 is a catalog of types of predetermined actions that 
can be performed by the client device 36 based on events. For example, an action may 
comprise "send e-mail to administrator when a message is blocked" or "send IM to 
administrator when the subscriber logs on to the service". 
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[0044] The action log data 130 comprises the subscriber identifier as a primary key and a 
foreign key, an action identifier as a primary key, the action type as a foreign key, an 
indicator of whether or not the action is completed, a time that the action was completed, 
and an action result. Actions taken in accordance with the policies are logged in the 
action log data 1 30. The action log data 1 30 may be periodically updated based upon 
data received from the policy engine 71 of the client device 36 by the IM server 64. 

[0045] Those having ordinary skill will recognize that the herein-disclosed computer- 
implemented acts can be directed by computer-readable program code stored by a 
computer-readable medium. Examples of the computer-readable medium include, but are 
not limited to, a magnetic medium such as a hard disk or a floppy disk, an optical 
medium such as an optical disk (e.g. a CD or a DVD), or an electronic medium such as 
an electronic memory (e.g. a computer's internal memory or a removable memory such 
as a memory card). The IM service registration server 20 and the IM server 64 comprise 
a computer to perform the computer-implement acts. 

[0046] It will be apparent to those skilled in the art that the disclosed inventions may be 
modified in numerous ways and may assume many embodiments other than the preferred 
forms specifically set out and described herein. 

[0047] The above disclosed subject matter is to be considered illustrative, and not 
restrictive, and the appended claims are intended to cover all such modifications, 
enhancements, and other embodiments which fall within the true spirit and scope of the 
present invention. Thus, to the maximum extent allowed by law, the scope of the present 
invention is to be determined by the broadest permissible interpretation of the following 
claims and their equivalents, and shall not be restricted or limited by the foregoing 
detailed description. 
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